Home page logo

snort logo Snort mailing list archives

Re: MySQL support for Snort 2.9.4
From: Joel Esler <jesler () sourcefire com>
Date: Tue, 11 Dec 2012 14:11:09 -0500

You aren't generating any alerts because of:

On Dec 11, 2012, at 2:06 PM, Kaya Saman <kayasaman () gmail com> wrote:

Bad Chk Sum:      9421212 ( 50.311%)

Try adding -k none to your Snort command line and see if you get anything logged that way. 

Action Stats:
    Alerts:            0 (  0.000%)
    Logged:            0 (  0.000%)
    Passed:            0 (  0.000%)

See, nothing alerted.

you might want to use PulledPork to manage your ruleset, as it looks like you have a bunch of unresolved flowbit issues.

Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

Please visit http://blog.snort.org to stay current on all the latest Snort news!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]